A type confusion flaw (CWE-843) in the Windows Ancillary Function Driver for WinSock, part of the Windows networking stack, allows an authorized local user to elevate privileges. Successful exploitation can give an attacker full control of the affected system (CVSS 7.8, high impact on confidentiality, integrity and availability). The attacker needs a local foothold with low privileges and is not directly reachable from the internet. Windows 10 Version 1607 and Windows Server 2016 are among the affected products.
Microsoft · Windows
A use-after-free vulnerability in the Windows Console Driver allows a local user with low privileges to elevate privileges, according to Microsoft up to SYSTEM level. Exploitation requires a local logon and a high-complexity condition, so the risk is mainly for shared systems, terminal servers and workstations where an attacker already has a foothold. Microsoft marked the flaw as not exploited at publication.
Microsoft · Windows Console Driver
A relative path traversal flaw (CWE-23) in Windows Shell allows an attacker with a local account to elevate privileges, potentially to SYSTEM level. No user interaction is required. Exploitation requires prior local access, so the main risk is on shared systems, terminal servers and endpoints that have had malware or phishing incidents.
Microsoft · Windows Shell
A heap-based buffer overflow in Microsoft Word, part of Microsoft 365 Apps, Office 365 for Mac and Office LTSC 2021 and 2024, can be used by an attacker to execute code. The CVSS vector (AV:L) requires local access, no privileges and user interaction, typically by opening a crafted document. The vendor title says Remote Code Execution and an unverified third-party entry describes network exploitation, so the attack vector should be confirmed on the MSRC advisory. Microsoft reports no public disclosure and no known exploitation.
Microsoft · Office Word
Research and translation in progress – available shortly.
A flaw in the Windows StateRepository API, a Windows 11 component, allows an authorized local user to gain elevated privileges. Successful exploitation could lead to full control over the affected system (high impact on confidentiality, integrity and availability). The attacker needs a valid local account, and no user interaction is required.
Microsoft · Windows 11
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A use-after-free flaw in Microsoft Office PowerPoint allows an unauthenticated remote attacker to execute code on a vulnerable system. Exploitation requires that a user opens a specially crafted PowerPoint file or previews it, for example in the Preview Pane. Microsoft rates the CVSS score as 8.8 (High) and exploitation as less likely; no active exploitation is confirmed.
Microsoft · Office PowerPoint
Research and translation in progress – available shortly.
Microsoft Power Apps contains an origin validation error (CWE-346) that allows an authorized attacker to execute code over the network. According to the CVSS vector, an attacker needs low privileges and user interaction, such as opening a malicious link, and the impact on confidentiality, integrity and availability is high. The NVD record is still awaiting analysis, and the affected versions conflict between sources.
Microsoft · Power Apps
A flaw in Windows Security Center (CWE-923, improper restriction of communication channel to intended endpoints) allows an attacker with a local, low-privilege account to gain higher privileges on the affected system. The attacker must already be able to run code on the device, for example after phishing or through a malicious app. Microsoft rates exploitation as less likely, and the sources show no public exploit.
Microsoft · Windows Security Center
Research and translation in progress – available shortly.
Windows OLE DB, the Windows data-access component, contains a heap-based buffer overflow in Windows 10 Version 1607 and Windows Server 2016. According to the CVE record, an unauthorized attacker can elevate privileges over a network. The CVSS vector requires user interaction (UI:R), and Microsoft does not describe the exact preconditions. Microsoft reports no public disclosure and no known exploitation.
Microsoft · Windows 10 1607
A use-after-free flaw in the Win32k kernel subsystem of Windows allows a locally authorized attacker to elevate privileges. An attacker with a low-privilege account on an affected host could gain SYSTEM rights. Attack complexity is high, and no in-the-wild exploitation or public proof of concept has been found.
Microsoft · Windows
Research and translation in progress – available shortly.
Microsoft Network Policy Server (NPS), the RADIUS and policy server often used for Wi-Fi 802.1X, VPN and network access, contains a heap-based buffer overflow. An authenticated attacker with low privileges on the network may execute code on the server. Attack complexity is high, and the attacker needs valid access to the NPS service. Microsoft rates the issue Important and reports no public disclosure or exploitation.
Microsoft · Network Policy Server
Research and translation in progress – available shortly.
The Windows Ancillary Function Driver for WinSock (afd.sys), a kernel-mode component, contains a type confusion flaw (CWE-843). A local user with low privileges can exploit it to gain elevated (SYSTEM) privileges. An attacker needs a foothold on the machine first, for example a malicious local account or code already running. The official CVSS base score is 7.0 (High).
Microsoft · Windows
A server-side request forgery (SSRF) flaw in Microsoft Office SharePoint Server Subscription Edition (on-premises) allows an authorized attacker to elevate privileges over the network. The attacker needs a valid low-privilege account and the attack complexity is high. Microsoft rates the vulnerability as Important with a CVSS 3.1 base score of 7.5; no public exploit and no active exploitation are known.
Microsoft · SharePoint Server
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A use-after-free flaw (CWE-416) in the Windows Push Notifications service allows an authorized local user to elevate privileges. The attack is not possible remotely and requires high complexity and low privileges. Affected are Windows 10, Windows 11 and Windows Server 2019 to 2025 systems, with Windows 10 1809 and Server 2019 among them.
Microsoft · Windows
Microsoft .NET contains an out-of-bounds write (CWE-787) in the System.Net.Sockets networking code that affects Windows systems. An unauthenticated attacker on the network can write outside a buffer and may execute code; Microsoft rates the flaw Important (CVSS 8.1). The bug is triggered when application code reuses a SocketAsyncEventArgs instance across IPv4 and IPv6 datagram sockets for UDP receives, so exposure depends on the applications in use.
Microsoft · .NET
Research and translation in progress – available shortly.
